# delego

Action authorization engine for AI agents with human terminal approvals, intent hashing, and an Ed25519-signed audit ledger.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 25
- Author: Delego-Dev
- License: Apache-2.0 · policy=link-only · description only; the file stays with the author
- Source: https://github.com/Delego-Dev/delego
- Updated: 2026-06-11
- HTML: https://affpapa.org/en/nevibecode/mcp/delego

## What it does

delego acts as an authorization intermediary between autonomous agents and credential brokers. Standard API credentials verify scopes rather than human intentions. When an injection redirects a prompt, a valid credential still executes unwanted calls. delego blocks this confused deputy scenario using deterministic Python 3.10+ policies without calling any LLM during authorization decisions.

The stdio MCP server exposes five tools: `delego_propose_action`, `delego_resolve_action`, `delego_pending`, `delego_audit_tail`, and `delego_show_policy`. Crucially, approval and denial tools are omitted from the agent interface. Humans must review and grant permissions manually in the terminal with `delego approve`.

Every human approval targets an exact action fingerprint and works only once. Audit entries form an Ed25519 hash chain. Note that a local signing key offers no defense against root host intrusion, and catching tail truncation requires verifying against an external head anchor.

## Requirements
- Needs: Python and uv (commands run via uvx)
- Environment variables: `DELEGO_HOME` — keys and tokens: ask the human for the values, never commit them or put them in shared files.

## Install

### Claude Code (native platform)

**Platform CLI**
```bash
claude mcp add --env DELEGO_HOME=<DELEGO_HOME> --transport stdio delego -- uvx delego
```
Replace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from delego <command>

### Codex

**Platform CLI**
```bash
codex mcp add delego --env DELEGO_HOME=<DELEGO_HOME> -- uvx delego
```
Replace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from delego <command>

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "delego": {
            "command": "uvx",
            "args": [
                "delego"
            ],
            "env": {
                "DELEGO_HOME": "<DELEGO_HOME>"
            }
        }
    }
}
```
Replace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from delego <command>

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "delego": {
            "type": "stdio",
            "command": "uvx",
            "args": [
                "delego"
            ],
            "env": {
                "DELEGO_HOME": "<DELEGO_HOME>"
            }
        }
    }
}
```
Replace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from delego <command>

### Gemini CLI

**Platform CLI**
```bash
gemini mcp add -e DELEGO_HOME=<DELEGO_HOME> delego uvx delego
```
Replace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from delego <command>

## When to use it
- stop unauthorized agent steps caused by indirect prompt injection
- require human terminal approval before sensitive credentials execute
- generate a tamper-evident Ed25519 audit chain for agent activity
- prevent approval replays across altered action payloads

## Example prompts
- Submit this transfer proposal through delego_propose_action and wait for my clearance.
- Check for any parked tasks by calling delego_pending.
- Execute the authorized operation with delego_resolve_action using the granted fingerprint.

## Similar
- [REA](https://affpapa.org/en/nevibecode/mcp/rea.md) — MCP server · ★ 386989
- [World Monitor](https://affpapa.org/en/nevibecode/mcp/world-monitor.md) — MCP server · ★ 89408
- [mcp](https://affpapa.org/en/nevibecode/mcp/kubeshark-mcp.md) — MCP server · ★ 12109
- [Robin: AI-Powered Dark Web OSINT](https://affpapa.org/en/nevibecode/mcp/robin-ai-powered-dark-web-osint.md) — MCP server · ★ 7658
- [jshookmcp](https://affpapa.org/en/nevibecode/mcp/jshookmcp.md) — MCP server · ★ 2061
- [OpenOSINT](https://affpapa.org/en/nevibecode/mcp/openosint.md) — MCP server · ★ 1802

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md